$ rpki-client -vvf rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft File: at5OHE4cCb8U36pMPWAPQY4X5y4.mft (raw, json) Hash identifier: +ZeLauCzCQoPpboyDEv84kTUawEG6HXNVPflAfiLIw4= Subject key identifier: 6F:22:E2:48:7B:19:87:41:9F:BE:B5:EB:C1:CB:58:29:80:3D:EA:4A Authority key identifier: 6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E Certificate issuer: /CN=A918429B/serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Certificate serial: 3495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft Manifest number: 3495 Signing time: Mon 30 Jun 2025 14:55:54 +0000 Manifest this update: Mon 30 Jun 2025 14:55:54 +0000 Manifest next update: Mon 07 Jul 2025 14:55:54 +0000 Files and hashes: 1: at5OHE4cCb8U36pMPWAPQY4X5y4.crl (hash: zbBs3ZMjmmhv354mEcaxMac2ISFGasgtLKA1sNXrqcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13461 (0x3495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918429B, serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Validity Not Before: Jun 30 14:55:54 2025 GMT Not After : Jul 7 14:55:54 2025 GMT Subject: CN=6862a57a-ebb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1c:19:f8:ac:57:7b:ba:f9:1c:23:a2:6b:66: 4b:f3:fc:00:94:6a:60:32:ca:cc:d3:f1:a7:72:9e: e3:4b:2e:fe:15:2d:30:34:6e:d8:40:df:8e:f3:51: 02:48:14:5f:bb:6f:90:2f:f5:5d:ec:11:0c:43:05: 48:27:cd:cc:61:aa:fc:44:69:aa:4c:b7:2d:33:72: 9c:eb:6c:eb:09:87:7d:20:26:8f:c8:a3:9e:a9:c2: b4:2c:e2:1e:82:2c:98:e3:be:d7:2e:7e:40:18:d1: c4:1b:c3:c2:bc:57:b3:5b:d2:6a:44:df:c6:0b:e0: 36:88:f6:93:eb:f0:67:48:9a:86:8f:33:3a:d0:50: 71:11:7f:8d:36:2b:7e:c4:bf:bf:fe:e3:a9:56:ae: 4b:74:b9:6f:a2:16:db:34:a7:f6:83:96:9f:0c:9b: dc:4f:0c:86:ca:eb:98:8c:1e:ef:a9:67:51:a9:3c: a2:37:e0:eb:cb:8c:a5:95:65:bb:be:bf:1f:0d:7d: 1b:93:6b:b9:da:87:16:65:55:a3:89:14:4a:0e:40: 2e:4f:33:50:25:40:cb:3a:4f:18:cb:fa:0d:df:9b: 08:0f:a8:7f:37:fd:2b:77:ec:6f:83:36:96:34:76: 81:3a:c6:3c:f2:4b:26:b6:66:f8:07:f3:6c:be:35: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:22:E2:48:7B:19:87:41:9F:BE:B5:EB:C1:CB:58:29:80:3D:EA:4A X509v3 Authority Key Identifier: keyid:6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:38:c5:48:d3:ee:6d:cd:d8:88:58:42:af:2c:0a:af:3e:9e: 01:c6:d7:c3:7e:e5:39:70:d4:fa:03:82:16:88:fb:32:f4:31: a3:84:db:b5:6a:4a:51:d1:d6:9b:f8:3a:64:fc:5d:04:80:6d: 69:02:0f:9f:4d:8f:4d:fc:72:bb:56:c7:05:3b:19:76:4e:77: c6:6b:3f:36:d1:00:85:e5:ce:19:0d:61:08:9b:55:35:15:b5: 29:8d:40:82:3d:29:d9:3d:3d:fd:8b:2e:85:0d:b2:05:78:35: dd:bd:37:88:ca:a4:c2:2d:3f:46:63:e3:81:ce:ff:b4:0c:9f: 81:be:8b:21:9d:29:f3:1e:a3:98:40:20:dc:8e:a4:a5:a9:c8: b9:5f:cf:d6:58:7f:34:0e:6f:4c:92:73:5e:51:e6:f4:fd:91: c6:60:aa:2c:62:57:7e:90:5f:30:78:ce:48:51:60:ed:52:2a: 5b:e6:a6:54:1a:6d:83:c9:44:ce:09:83:e3:43:3d:0d:15:90: 9e:72:50:e0:35:ba:73:7a:32:22:90:e5:97:a3:9a:32:ea:ec: 95:5a:60:ca:dc:f6:da:df:a9:6e:8d:e8:83:77:36:b5:c7:28: bb:01:76:ee:52:ef:87:18:d4:85:87:54:29:42:63:f5:9b:b5: a0:5b:e4:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyOUIxMTAvBgNVBAUTKDZBREU0RTFDNEUxQzA5QkYxNERGQUE0QzNENjAwRjQx OEUxN0U3MkUwHhcNMjUwNjMwMTQ1NTU0WhcNMjUwNzA3MTQ1NTU0WjAYMRYwFAYD VQQDEw02ODYyYTU3YS1lYmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRwZ+KxXe7r5HCOia2ZL8/wAlGpgMsrM0/Gncp7jSy7+FS0wNG7YQN+O81EC SBRfu2+QL/Vd7BEMQwVIJ83MYar8RGmqTLctM3Kc62zrCYd9ICaPyKOeqcK0LOIe giyY477XLn5AGNHEG8PCvFezW9JqRN/GC+A2iPaT6/BnSJqGjzM60FBxEX+NNit+ xL+//uOpVq5LdLlvohbbNKf2g5afDJvcTwyGyuuYjB7vqWdRqTyiN+Dry4yllWW7 vr8fDX0bk2u52ocWZVWjiRRKDkAuTzNQJUDLOk8Yy/oN35sID6h/N/0rd+xvgzaW NHaBOsY88ksmtmb4B/NsvjXDdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8i4kh7 GYdBn76168HLWCmAPepKMB8GA1UdIwQYMBaAFGreThxOHAm/FN+qTD1gD0GOF+cu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI5Qi9CNjAwNjNBQzFE OTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0NiOFUzNnBNUFdBUFFZNFg1 eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0NU9IRTRjQ2I4VTM2cE1QV0FQUVk0WDV5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI5Qi9CNjAwNjNBQzFEOTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0Ni OFUzNnBNUFdBUFFZNFg1eTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTOMVI0+5tzdiIWEKvLAqvPp4BxtfDfuU5cNT6A4IWiPsy9DGjhNu1 akpR0dab+Dpk/F0EgG1pAg+fTY9N/HK7VscFOxl2TnfGaz820QCF5c4ZDWEIm1U1 FbUpjUCCPSnZPT39iy6FDbIFeDXdvTeIyqTCLT9GY+OBzv+0DJ+BvoshnSnzHqOY QCDcjqSlqci5X8/WWH80Dm9MknNeUeb0/ZHGYKosYld+kF8weM5IUWDtUipb5qZU Gm2DyUTOCYPjQz0NFZCeclDgNbpzejIikOWXo5oy6uyVWmDK3Pba36lujeiDdza1 xyi7AXbuUu+HGNSFh1QpQmP1m7WgW+Sq -----END CERTIFICATE-----Generated at Tue Jul 1 09:03:22 2025 by rpki-client